Require invirt-web POSTs to have proper referers

[invirt/packages/invirt-web.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index f196abb..1d8e0f3 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,7 +1,76 @@
+invirt-web (0.1.18) unstable; urgency=low
+
+  * Require a valid Referer header for any POSTed form, as a guard against
+    cross-site request forgery.
+
+ -- Joshua Oreman <oremanj@mit.edu>  Sat, 07 May 2011 22:34:46 -0400
+
+invirt-web (0.1.17) unstable; urgency=low
+
+  * Add support for amd64 and i386 squeeze autoinstalls.
+
+ -- Quentin Smith <quentin@mit.edu>  Sat, 22 Jan 2011 21:27:04 -0500
+
+invirt-web (0.1.16) unstable; urgency=low
+
+  * Show historical domain CPU usage if available.
+
+ -- Quentin Smith <quentin@mit.edu>  Wed, 29 Dec 2010 02:23:10 -0500
+
+invirt-web (0.1.15) unstable; urgency=low
+
+  * Add support for amd64 debathena lucid autoinstalls.
+
+ -- Quentin Smith <quentin@mit.edu>  Tue, 28 Dec 2010 02:02:09 -0500
+
+invirt-web (0.1.14) unstable; urgency=low
+
+  * Add support for i386 maverick and amd64 and i386 lucid autoinstalls.
+  * Use the autoinstall ID as the preseed filename, instead of the distro
+    + arch, so that there can be multiple autoinstalls for the same
+    distro.
+
+ -- Quentin Smith <quentin@mit.edu>  Mon, 27 Dec 2010 14:17:31 -0500
+
+invirt-web (0.1.13) unstable; urgency=low
+
+  * Support preseed-based autoinstalls, including amd64 maverick.
+
+ -- Quentin Smith <quentin@mit.edu>  Sun, 26 Dec 2010 23:47:21 -0500
+
+invirt-web (0.1.10) unstable; urgency=low
+
+  * Enable VM creation by default
+
+ -- Joshua Oreman <oremanj@mit.edu>  Mon, 18 Oct 2010 14:54:21 -0400
+
+invirt-web (0.1.9) unstable; urgency=low
+
+  * Adds support for disabling (conditionally) VM creation in list.mako, main.py
+
+ -- Peter A. Iannucci <iannucci@mit.edu>  Mon, 04 Oct 2010 20:54:10 -0400
+
+invirt-web (0.1.8) lucid; urgency=low
+
+  [ Andrew M. Farrell ]
+  * Rename code/ to /var/www/invirt-web/ in binary-fixup
+
+  [ Greg Brockman ]
+  * Use expandOwner/expandAdmin rather than removed expandLocker
+
+ -- Greg Brockman <gdb@mit.edu>  Thu, 26 Aug 2010 02:24:57 -0400
+
+invirt-web (0.1.7) unstable; urgency=low
+
+  * Checkout the current HEAD when building
+
+ -- Greg Brockman <gdb@mit.edu>  Mon, 23 Aug 2010 15:05:29 -0400
+
 invirt-web (0.1.6) unstable; urgency=low
 
   * Remove crufty invirt-web-iptables files
   * Switch to git from svn
+  * Add gitweb configuration
 
  -- Greg Brockman <gdb@mit.edu>  Sat, 14 Aug 2010 00:46:44 -0400